Privacy Notice

The privacy policy was last updated on: Jul 13, 2026.

In recognition of the importance and confidentiality of personal data, this notice has been prepared in accordance with the Personal Data Protection Law and its regulations in the Kingdom of Saudi Arabia. It reflects our commitment to delivering the highest levels of service while maintaining the confidentiality and privacy of user and input data.

This privacy notice applies to the VESA-Lite / VESA application. All users of the application, whether they are company employees, contractors, or subcontractors, working either on a permanent or temporary basis, must adhere to the specified standards.

1. Consent to the Privacy Notice

Your acceptance of this privacy notice signifies your agreement to the terms and conditions of privacy that apply to all services provided by VESA-Lite / VESA on its official website, as well as any ongoing modifications required by the nature of the business.

2. Changes to Privacy Notice

VESA-Lite / VESA reserves the right to make changes to this Privacy Notice at any time. You are advised to review the Privacy Notice periodically through VESA-Lite / VESA to stay informed of any updates. Any changes or modifications will become effective upon publication of the updated Privacy Notice.

3. Mechanism for Collecting Personal Data

Personal data is collected through the registration of employee, visitor, and vehicle information required by the VESA-Lite / VESA system by system administrators, company users, and contractors.

4. How is Data Processed and Managed?

The collected data is used to manage access to facility sites. Authorized security personnel review employee, visitor, and vehicle information to verify access in accordance with the assigned permissions. The data may also be used to enable automated gate access and record employee card reads, vehicle sticker reads, and visitors' QR code scans, as well as to generate detailed and summary reports based on this information.

5. What Personal Data is Collected?

We collect and process your personal data, which include:

• Employee Data: Name, ID/residency number, national/residency ID photo, mobile number, email, job title, company name, nationality, personal photo, Blood Type.
• Visitor Data: Name, ID/residency number, national/residency ID photo, visitor photo, email, mobile number, nationality and visit details.
• Vehicle Data: Driver's license, Vehicle image, plate number and vehicle type.
• Automatic Application Usage Data: IP address, login time, visited pages.

6. Why Do We Collect and Use Personal Data?

Your personal data is collected to meet work requirements for the following purposes:

• Enabling access to facility sites.
• Reviewing your data details before card printing and ensuring access to your information in emergencies.

7. Disclosure of Personal Data

VESA-Lite / VESA commits to not sharing personal data with other parties, except under circumstances mentioned in Article 15 of the Personal Data Protection Law. If your data is to be used for purposes other than those stated, your prior consent will be obtained.

8. How Is Personal Data Stored?

Personal data is securely stored with cloud service providers within the Kingdom of Saudi Arabia and is securely destroyed using appropriate methods once the purpose for which it was collected has been fulfilled.

However, personal data may be retained beyond this period in the following cases:

• If legal justifications exist for retaining the data for a specified period. It will then be deleted after the longer of the stipulated period or the data collection purpose.
• If the data is closely related to a case under judicial consideration, retention is required for this purpose. The data will be deleted after completing the judicial procedures.
• If all identifying elements of the individual are removed.

9. Your Rights Regarding Your Personal Data

You have the right to:

• Be informed: This privacy notice has been prepared to inform you of all necessary details regarding the collection of your personal data.
• Access, correct, complete, update, or obtain a copy of your personal data in a clear format.
• Request the deletion of data no longer needed, provided it does not conflict with the regulations or legitimate interests stated in the Personal Data Protection Law.

You can submit requests to access, modify, or delete your personal data, or submit complaints and suggestions by contacting us via email at:

• info@gama-ksa.com
• District10@haifcompany.com

10. Data Security

We are committed to taking appropriate measures to protect personal data, including administrative, technical, and physical safeguards to prevent data destruction, loss, alteration, unauthorized access, disclosure, or misuse.

Personal data is securely stored and processed according to standards issued by the National Cybersecurity Authority. Access to data is limited to system administrators and authorized personnel based on the principle of "need-to-know" and "minimum privileges." Before using or processing data, its necessity and alignment with its intended purpose will be assessed.

When using external service providers for data processing, we require adherence to the same standards to ensure the security of personal data, regardless of where it is transferred or stored.

General Provisions

This notice is in Arabic, which is the official language. If there are discrepancies between the Arabic version and its English translation, the Arabic version prevails.